Global Software Security Leader (SDLC & App Risk)

Lenovo; Raleigh (NC); On-site; USD 140,000 - 210,000; Full time

Job summary

Lenovo seeks a Senior Manager Software Security in the Security Center of Excellence for PC and Smart Devices. You will lead a global team of security engineers, assess security across Lenovo and third-party apps for Windows and Android, and drive secure development practices within a multifaceted product portfolio.

You will mentor teams, perform code reviews, and stay current with security trends and frameworks to ensure robust product security across Lenovo devices.

Qualifications

• Bachelor's degree or equivalent cybersecurity experience (5+ years).
• 3+ years of management experience leading software developers or cybersecurity teams.
• 3+ years in Computer Security with secure software design, vulnerability management and product security testing.
• 3+ years experience with at least two of: C/C++, C# .NET, or Java; 1+ year in all.
• At least 1 cybersecurity certification such as CISSP or SANS cert.

Responsibilities

• Lead a global team of software security engineers and development security champions to assess the security posture of Lenovo and 3rd party developed applications for Windows and Android devices.
• Conduct security assessments of client applications, Lenovo and 3rd party, using industry-standard tools to identify vulnerabilities.
• Risk-ranking of identified threats to prioritize mitigation and remediation activities.
• Help train development teams in secure development best practices.
• Perform security code reviews of application source code.
• Participate in software design sessions with development teams to ensure secure design and architecture.
• Collaborate with development teams to review and address security of Lenovo- and third party-developed software.
• Act as trusted advisor to product development and engineering teams on secure design and validation.
• Identify and evaluate tools; refine processes for security reviews.
• Define security requirements for Lenovo and third-party development teams.
• Stay current in latest security tools and practices for Windows and mobile app development.
• Act as a Secure Development Lifecycle evangelist within PC & Smart Devices.

Skills

Leadership

Secure development

Threat modeling

C/C++

Java

C# .NET

Communication

Education

Bachelor's degree in Computer Science/Engineering or related field

5+ years cybersecurity experience

Tools

Burp Suite

Kali Linux

ZAP

Static analysis tools

Job description

Lenovo seeks a Senior Manager Software Security in the Security Center of Excellence for PC and Smart Devices. You will lead a global team of security engineers, assess security across Lenovo and third-party apps for Windows and Android, and drive secure development practices within a multifaceted product portfolio.

You will mentor teams, perform code reviews, and stay current with security trends and frameworks to ensure robust product security across Lenovo devices.